Ubuntu Servers :: Squid Proxy Very Slow For Web In Default Config?
Jan 10, 2010
I just set up squid for the first time. I have zero experience with proxy servers. I used this guide:[URL](I also looked at a few other guides such as this one:ttp://ubuntuforums.org/showthread.php?t=320733. However, I wanted to most barebones config to start with and the link I used was the simplest.)So now that I have it set up, I'm testing it with FoxyProxy. It is not working well. I went to speedtest.net. The download and ping tests were just as fast as without the proxy, but the upload test fails completely.Furthermore, many web pages load very slowly or not at all. So performance is very mixed, but mostly poor.
everytime if more that 10-15 people using internet at same time squid proxy slow to responde everyweb just keep loading and here my squid proxy settings 1 nic squid proxy 2.7 stable 9 ubuntu 64bit intel duo core
I have configured Squid proxy on RHEL 5. Now I want all squid clients to use default website which is set by Squid Proxy Server. So whenever user opens their browser they will visit same website automatically.
I'm running Ubuntu Server 11.04 with OpenSSH, trying to create an ssh tunnel (for web traffic) to it from my (also Ubuntu) laptop. This is the command I'm using to create the tunnel:
Code: ssh -ND localhost:8080 email@example.com I had it all working on a virtual machine.. which was deleted What settings/lines do I need to change/add from the default OpenSSH config files to get tunnelling to work? I've Googled and AllowTcpForwarding is set to yes, as is X11Forwarding.. but it still doesn't work. Chrome can connect to the server, but says the connection was closed before any data was sent.
I have configured a squid proxy server with @2 eth in different network subnet and with site blocking and extn file download blocking. One eth0 for office wired network and another eth1 is for office wireless network for laptop use for guest and visitors.
The problem is [URL] is an Indian government website, which is not working though this proxy server and the Internet Explorer is getting very slow and freezing the computer. In alternate I have configured a another test server with squid proxy with out any security and test the same. the problem is still with the all the computer in the network. The above website is perfectly working with Gateway configuration in TCP/IP properties in Network Configuration in MS Windows XP computers but through squid proxy its not working.
I have 4 servers running squid/3.1.1 proxy server. Since the latest version I can no longer FTP. I have posted this problem in multiple places but have received almost no response. I've found several other post to this problem throughout the Internet which have also gone unanswered. So, once again, I thought I'd give it a try. As I said "I have 4 servers running the newest version of Squid". When I try to access an ftp, any ftp, I receive an error (check attached image). This was never a problem until just recently. Squid should work perfectly find with ftp, it is not a strictly http proxy.
I turned my firewall off just to make sure, still had the same issue. If I jump directly on the server itself with no proxy settings set in the browser it will work fine. As soon as I set the browser setting to access the Squid software I get the same error. I've included my squid config (which is unchanged from the default settings), maybe somebody better versed than myself can point out an obvious flaw. Everything else seem to work just fine, it's only FTP that's a problem.
I have a reverse proxy set up with squid. I'm going to try and explain what it's doing and I apologize for it being confusing, I'll do the best I can to describe my problem. First, it's for our phone system. We run a ShoreTel Voip system. The owner has decided he wants me to setup MCM (Mobile Call Manager), which from what I can see is an under developed, and almost impossible to get help with Shoretel software. But he's convinced he needs it for his Iphone. It's supposed to, in a nutshell, turn his Iphone into his work phone with all the advantages and doodads that come with it. Apparently, "they have an app for that". On the server side, I need to setup a reverse proxy back into the network on our phone server. Simple enough, I did this with squid. I used the following lines:
always_direct allow all It most definitely is allowing traffic back to the phone server, the problem is, it hands out my internal server address to the outside client. So for instance, if I connect to the outside routable address with my phone, it will immediately change the url to http://172.17.137.7 which is the inside nat address of my phone server. Which of course doesn't work, since I couldn't browse to that address from the outside. It does however work from the inside of the network, obviously because 172.17.137.7 is accessible from the inside.
What I'm trying to do seems pretty straight forward but I can't seem to find any documentation on this searching the "internets" but I think I'm getting mixed in with all the other proxy documentation.
What I'm trying to do is basically replicate the proxy settings from a desktop machine to a server machine. I have Ubuntu 10.04 Desktop running fine on a corporate network using the Automatic Proxy Configuration option and supplying the appropriate URL that I pulled for a corporate issued windows machine. I would like to do this on Ubuntu server 10.04 as well.
What I've got so far is coping out the proxy information from the .pac file and setting the http proxy value directly but I want to follow the URL so that the system follows any changes that come down the road. how to integrate a .pac (Proxy auto-config) url into ubuntu server?
I have configured router(192.168.1.2) to serve only one machine with IP - '192.168.1.6' and set up SQUID proxy on '192.168.1.6'. I have defined some rules(ACL) regarding connections to internet on SQUID proxy.
I changed the Gateway of rest of machine (192.168.1.60 - 192.168.1.69) from '192.168.1.2' to '192.168.1.6'.
The policies which I defined in SQUID is working properly but 'Linux Evolution mail' client is not fetching mails.
Is I have to do any other settings on 'Linux System' or 'Evolution mail client'.
I have squid running on F12 fully updated. Pretty much stock config except bigger cache size.
Over time it seems to start lagging and occupying more memory. Currently using ~400Mb after a couple of months. I'm sure its causing some lag / refreshes because if I turn if off and go direct to internet the same site I had to hit refresh on, loads instantly.
Going through the logs in /var/log/squid I don't see anything suspicious with the untrained eye, whats a better way of debugging it to see where/why the delays are happening? Its a single user setup (for fun really lol) so theres a lot of misses in access.log. cache.log just has a handful of bad img headers which does not line up with lagging websites.code...
Im running Ubuntu 10.04, currently living out of the country from where my server is located. We have a 4 Mbps dsl connection that speedtests fine to the closest server, and if we test from our present location to the speedtest.net server closest to our server the speed is great as well. When I SSH in to my server and setup a socks 5 proxy the speed goes through the floor. We barely get .2 Mbs. Whether I use putty or terminal from our mac, they both get the same slow speed. I've searched the forums and google extensively, but I haven't been able to come up with anything yet.
I would like to ask some help and tutorial for setting up and how to configure squid proxy server in my (Home PC Server). I am a newbie in Linux Centos. I already installed in my system the CentOS 5.5 . Now, I want to configure it as my internet server, all of my 4 system running in Windows including the laptop I want to connect through my CentOS pc with username authentication. I assign all IP address by static. see tthe attachement in my set up. [url] I just want to know what I need to change and add in my squid config file. And how can I configure properly my CentOS with 2 LAN card as internet server.
I am trying to set up my squid3 proxy as a transparent proxy - right now, I have to manually configure browsers to access via proxy. I understand that I have to put some rules into Iptables and also some further directives in the squid.conf.
I have a couple of specific questions. The proxy server is running on a Ubuntu 10.04 workstation and this machine also acts as a dhcp server for the network. I have just one subnet , namely 192.168.0.1-254 There is only 1 network card. Is it much easier to put in a second network card or is it just as easy to configure the existing lan card as a dual IP?
Is it necessary to configure these 2 IP's ( whether they are via 2 lan cards or dual IP on single card ) to be on different subnets. i.e ETH0 192.168.0.1 and ETH1 192.168.1.1 or is ok to have something like ETH0 192.168.0.1 and ETH1 192.168.0.254 ( where ETH0 is the one facing the LAN and ETH1 points to the modem router / switch i.e The Internet ) Where specifically do I save the Iptables rule configuration file and what must I call it ?
i want to setup squid proxy server at my home. my service provider has ISA server install on its machine. in windows as a client we have to enter proxy settings manually to IE and firefox. but now in squid where i have to define to use this proxy settings. and what about /etc/resolv.conf . my service provider's connection settings are stated as under.:
IP ADDR= 192.168.1.x subnet mask=255.255.255.0 Proxy= 192.168.1.1 port= 8080
I'm mon webmaster/developer and I'm new in Linux. Our office suddenly needs to setup a proxy server. Ubuntu Squid proxy server immediately came as an option for us. The question is: does transparent squid proxy configuration using Ubuntu will have no problem with computers running on Windows OS?
I have to use squid proxy server on fedora14 to develop the application/ software based on the Proxy sever analysing and count number of user and downloaded file size... .My main problems are, I'm not able to configure the access.log file in "Common Logfile Format" and how to develop the application
we having more than 5000 users and will have 7 squid proxy servers with high end configuration upto 4gb ram n 320*5 HD in rhel4&5 most of them complaining that at peak hours their browsing speed is slow but we are having 1gbpgs link at peak hours i.e when established connections r flowing more than 550 browsing gets slow how to do fine tuning are squid is only responsible to access upto 600 connections
I'm trying to set up squid proxy as a replacement for a cgiproxy perl script.I would like to be able to hit it with a url, and have it pass everything back to the browser, something like URL... much the same way the cgiproxy script works.
This is my first time messing with squid, and I am completely lost. Does anyone have a link to some very detailed step by step instructions on how to do this?Can someone please tell me *which* kind of proxy I'm looking for? I see "interception proxy" or "transparent proxy" and a bunch of other terms thrown around in the docs, but nothing I have seen tells me which of those I'm actually looking for, or if what I'm trying to do is even possible with squid.
I need to block some of my sites with SQUID Proxy. I added following lines to my SQUID configuration file but still the site remains unblocked.How to block it?acl blocksites url_regex yahoohttp_access deny blocksitesI have also tried saving some url & filter content in a file and edited configuration as follows,acl blocksites url_regex "/etc/squid/squid-block.acl"http_access deny blocksitesThe squid-block.acl file contents are.cricinfo.commp3
I need to create two Access Control Lists for my networks using SQUID proxy. The ip address range from 220.127.116.11 to 18.104.22.168 for one network and from 22.214.171.124 to 126.96.36.199 for another network. How can I make it?
how-to configure squid proxy server. I still haven't been able to find a solution. I want to set up squid as a open http proxy server. So people from other networks can connect through the proxy without having to login.Do I have to use iptables to reroute http traffic to squids proxy port? I have forwarded the port in my ISP modem so I know thats working, its the squid config that has flaws or iptables locally.